Privacy Policy

devlo is a B2B sales prospecting agency that helps companies define target markets, build account lists, run outbound campaigns, and track qualified meetings.

This policy covers devlo.ch, the paid mirror devlosales.com, contact forms, consultation forms, internal paid acquisition workflows, and B2B services provided to clients.

• Form data: first name, last name, email, phone, company, role, country, company size, message, and qualification information.
• Technical data: IP address, user agent, device, browser, pages viewed, timestamps, referrer URL, and consent preferences.
• Advertising attribution data: UTMs, gclid, gbraid, wbraid, landing page, current URL, paid host, referrer, session ID, and first-seen timestamp.
• Client data: ICP criteria, targeting instructions, target accounts, B2B business contacts, campaign messages, results, replies, meetings, and CRM data required to deliver the service.
• Google Ads API data for our own accounts: campaigns, ad groups, keywords, ads, budgets, conversions, reports, and click identifiers required for measurement.

• To answer inbound requests and prepare consultations.
• To provide B2B prospecting, qualification, reporting, and AI Sales Ops services.
• To measure marketing performance through Google Ads, Google Analytics, and HubSpot.
• To create, validate, audit, and measure devlo's own Google Ads campaigns through an internal controlled workflow.
• To import offline conversions into Google Ads when click identifiers such as gclid, gbraid, or wbraid are available.
• To secure the site, prevent abuse, maintain systems, and comply with legal obligations.

We do not sell personal data. We share data only with providers required for website operations, client services, measurement, or compliance.

• Google Ads, Google Analytics, and Google Tag Manager for advertising measurement, consent, and attribution.
• HubSpot for forms, CRM, qualification statuses, and sales follow-up.
• TidyCal for meeting booking.
• Vercel for website hosting.
• Google Workspace, Slack, and internal operations tools for collaboration and support.
• Lemlist, Clay, LinkedIn Sales Navigator, or comparable providers when required for a contracted client campaign.
• Professional advisers, authorities, or courts when legally required.

devlo's Google Ads API workflow is used to manage and measure devlo's own advertising accounts. It is not a third-party self-serve platform and does not resell Google Ads API access.

We request only the access required for the intended functions: campaign management, validation, reporting, and offline conversion import. Enhanced conversions, Customer Match, or other sensitive user-data uses are not enabled at launch without a separate privacy and compliance review.

When we process data received from Google APIs, we comply with the Google API Services User Data Policy, including the Limited Use requirements: https://developers.google.com/terms/api-services-user-data-policy. Such data is used only to provide or improve authorized features, secure the service, comply with law, and follow applicable Google policies.

• The site uses HTTPS/TLS, access controls, secrets stored outside source code, and least-privilege access for people and systems. Data is encrypted at rest where provided by our hosting or SaaS platforms.
• Form and CRM data is retained for up to 24 months after the last substantive interaction or the end of the contract, unless longer retention is required for invoicing, evidence, or law.
• Advertising attribution identifiers and measurement data are retained for up to 24 months. Technical and security logs are retained for up to 90 days unless an incident requires longer retention.
• Client campaign data is retained for up to 24 months after the contract ends, unless a different contract term, legal duty, or reasonable evidence need applies.
• Verified deletion requests are handled within a target period of 30 days where law and contractual duties allow.

Depending on your location, you may request access, correction, deletion, restriction, objection, or portability of your data. You may also withdraw consent for cookies and marketing communications where consent applies.

To exercise these rights, contact privacy@devlo.ch. We may request reasonable information to verify your identity before processing a request.

Our providers may process data in Switzerland, the European Union, the United Kingdom, the United States, or other countries with appropriate contractual safeguards.

Our services are intended for B2B companies and are not designed for children.